This vulnerability arises from improper input validation in the printing component of Google Chrome versions before 149.0.7827.53. An attacker with control over the renderer process can exploit this to leak data across origins by crafting a malicious HTML page. The issue is limited to scenarios where the renderer process is already compromised, and it affects the confidentiality of cross-origin data during printing operations.

The impact is a potential information leak of cross-origin data when the renderer process is compromised. This could lead to unauthorized disclosure of sensitive information accessible within the browser context. There are no reports of active exploitation, and the severity is considered medium by the Chromium security team.

Patch status is not yet confirmed—check the vendor advisory for current remediation guidance. The vendor advisory URL provided should be monitored for updates regarding an official fix. Until a patch is confirmed, users should exercise caution with untrusted content and consider restricting access to the renderer process or disabling printing features if feasible.